
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/CEDA6062150911F1B271807B1E3D8C67.roa
File: CEDA6062150911F1B271807B1E3D8C67.roa (raw, json)
Hash identifier: 5+Y9YzSMax1GuLcAhCIgRYvQ+xj/kl1boUJm7Dh+PIg=
Subject key identifier: 4D:05:FE:C6:80:AB:D3:64:83:CC:A4:29:83:CE:C9:6C:59:DF:FA:21
Certificate issuer: /CN=A91538E7/serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5
Certificate serial: A6
Authority key identifier: 57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/CEDA6062150911F1B271807B1E3D8C67.roa
Signing time: Sun 04 Oct 2026 20:41:27 +0000
ROA not before: Sun 04 Oct 2026 20:41:27 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 20001
IP address blocks: 191.1.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl
rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5
Validity
Not Before: Oct 4 20:41:27 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac2b9f7-c578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:40:20:20:30:dd:ea:20:e8:04:cb:25:cc:
4d:bc:3e:0a:e7:22:d9:b3:dd:fd:18:19:4d:55:bd:
fb:ad:28:2e:f4:12:4b:5a:ec:ce:df:05:e8:72:30:
be:c5:57:19:a0:ea:c8:ed:f2:95:92:de:6a:e8:34:
94:3c:43:14:ec:85:08:3d:07:9b:0a:fd:8e:77:42:
2d:e1:3f:6a:b9:79:08:83:dc:ae:24:33:7d:55:9a:
27:27:96:b0:54:3f:c9:3b:d6:d4:e2:dd:33:4c:d3:
1a:1b:31:bd:54:61:d5:39:94:cf:a4:95:4a:d7:6d:
eb:2f:0c:72:9d:8a:41:ca:41:9c:ca:47:73:3a:aa:
4b:6d:a4:fc:b1:bc:d3:c8:42:9e:ba:85:60:7c:59:
52:4f:17:c1:73:6c:68:a7:67:aa:0a:ed:15:b9:32:
a0:81:5a:ad:8b:79:a0:30:e9:6b:9a:e8:a1:7b:bf:
14:5b:7b:e6:a5:b3:f9:6a:46:93:71:d2:d6:ba:1d:
cc:d0:d4:b1:bb:11:fe:8a:e6:2a:f6:d6:9c:7a:48:
23:6a:c4:cb:93:37:6d:7d:43:9f:3d:64:93:04:d6:
98:da:68:cf:81:a0:98:0f:1f:2f:15:a4:46:07:21:
d4:98:78:37:1e:e8:df:34:a8:80:fc:ca:6e:4d:14:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:05:FE:C6:80:AB:D3:64:83:CC:A4:29:83:CE:C9:6C:59:DF:FA:21
X509v3 Authority Key Identifier:
keyid:57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/CEDA6062150911F1B271807B1E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
191.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:d9:e5:7e:6d:58:ac:72:d0:a7:7d:8a:2f:06:10:99:c8:4a:
da:75:20:6d:f2:26:e1:d4:06:a8:f9:35:11:4b:04:db:80:62:
12:e8:f3:b5:99:51:71:9b:ea:c1:f2:25:ad:a4:6b:ad:2c:86:
cf:c2:1f:22:2d:f3:bb:2f:04:d4:75:e0:37:10:ec:02:4f:22:
27:c1:9b:2c:6e:37:4f:de:76:e8:f2:82:b5:75:15:64:44:2d:
6b:a1:e8:61:12:a4:4e:c6:aa:3e:48:a7:c8:ca:42:9f:c3:7f:
93:da:fd:60:fe:c1:d4:4f:ed:86:bd:77:81:9b:0f:ee:10:d6:
8a:8d:84:04:67:e3:88:35:03:9d:64:02:db:c4:6a:f8:25:c6:
64:c0:d8:98:6b:27:cd:e3:4a:bc:dd:15:86:2e:76:d5:42:cf:
72:4a:48:d8:16:52:85:7a:76:7c:8c:b8:13:84:86:d4:00:13:
74:01:5d:b4:65:b0:d0:c8:ca:69:e9:08:d8:ac:4c:7c:97:f2:
b2:a6:39:41:80:bd:7d:f8:b9:b2:49:4c:b1:88:15:96:38:71:
c0:ce:f3:e0:e9:2a:4c:57:fc:45:60:24:1b:ff:69:e5:2b:c8:
1e:b8:3f:7f:21:a2:4e:45:c1:ab:08:9b:07:e8:67:3a:fa:e4:
d4:7f:4e:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:53:02 2026 by rpki-client